{"vulnerability": "CVE-2026-72528", "sightings": [{"uuid": "e410826e-1d1f-411d-b494-622789d21404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72528", "type": "seen", "source": "https://jvn.jp/en/jp/JVN48627289", "content": "", "creation_timestamp": "2026-10-14T20:00:30.000000Z"}, {"uuid": "493ea202-7032-4c0d-af64-a71ff65245d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72528", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117444067247598339", "content": "CVE-2026-72528  \"Handmade Marketplace App - Creema\" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specially crafted URL, a website set up by the attacker may be displayed within the app's screen of a user. As a result, the user may become a victim of a phishing attack.\nhttps://www.cve.org/CVERecord?id=CVE-2026-72528https://play.google.com/store/apps/details?id=jp.creema.creema_android&hl=jahttps://apps.apple.com/jp/app/id916614208https://jvn.jp/en/jp/JVN48627289/#CREEMALTD. #\"HandmadeMarketplaceApp-Creema\"forAndroid #\"Creema-HandmadeMarketplaceApp\"foriOS#CVE_2026_72528#bot", "creation_timestamp": "2026-10-15T08:50:49.273782Z"}]}